The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_darn intrinsic into a single call, thus reducing the entropy of the random number generator. This occurred because a volatile operation was not specified. For example, within a single execution of a program, the output of every __builtin_darn() call may be the same.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gcc | Oct 1, 2024 | Sep 2, 2019 |
| Centos_linux | — | Upgrade libitm-develUpgrade gcc-c++-debuginfoUpgrade libatomic-debuginfoUpgrade libgompUpgrade libtsan-debuginfoUpgrade libgfortranUpgrade gcc-offload-nvptxUpgrade liblsanUpgrade libgomp-offload-nvptx-debuginfoUpgrade liblsan-debuginfoUpgrade libgomp-offload-nvptxUpgrade libasanUpgrade libasan-debuginfoUpgrade gcc-gdb-pluginUpgrade gccUpgrade cppUpgrade libstdc++-develUpgrade libgcc-debuginfoUpgrade libitmUpgrade gcc-c++Upgrade gcc-gfortranUpgrade gcc-gfortran-debuginfoUpgrade gcc-debugsourceUpgrade gcc-debuginfoUpgrade libubsan-debuginfoUpgrade libgomp-debuginfoUpgrade libatomic-staticUpgrade libstdc++-docsUpgrade libgccUpgrade libquadmathUpgrade libitm-debuginfoUpgrade cpp-debuginfoUpgrade gcc-plugin-devel-debuginfoUpgrade libstdc++Upgrade gcc-gdb-plugin-debuginfoUpgrade libquadmath-debuginfoUpgrade libtsanUpgrade libgfortran-debuginfoUpgrade libubsanUpgrade libstdc++-debuginfoUpgrade libquadmath-develUpgrade gcc-offload-nvptx-debuginfoUpgrade libatomic | Apr 29, 2020 | Sep 2, 2019 |
| Debian | — | Upgrade gcc-9 | Jul 30, 2024 | Sep 2, 2019 |
| Gentoo Linux | — | Upgrade sys-devel/gcc. | Sep 25, 2024 | Sep 2, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libitm-develUpgrade libasanUpgrade gcc-c++Upgrade libgompUpgrade libgfortranUpgrade libstdc++-develUpgrade gcc-gfortranUpgrade gcc-objc++Upgrade cppUpgrade gccUpgrade libitmUpgrade gcc-objcUpgrade libobjcUpgrade libatomicUpgrade libgccUpgrade libstdc++Upgrade libatomic-static | Sep 30, 2019 | Sep 2, 2019 |
| Oracle_linux | — | Upgrade libatomic-staticUpgrade libtsan-staticUpgrade gccUpgrade libstdc++-docsUpgrade libquadmathUpgrade gcc-plugin-develUpgrade libasan-staticUpgrade gcc-objc++Upgrade libobjcUpgrade libstdc++-develUpgrade gcc-c++Upgrade libgo-develUpgrade libgccUpgrade libgo-staticUpgrade cppUpgrade libatomicUpgrade libitm-staticUpgrade libitmUpgrade libquadmath-staticUpgrade gcc-gdb-pluginUpgrade libstdc++-staticUpgrade libstdc++Upgrade libgompUpgrade gcc-gfortran | Oct 5, 2022 | Sep 2, 2019 |
| Redhat_linux | — | Upgrade libstdc++-staticUpgrade libatomicUpgrade gccUpgrade cppUpgrade libgfortranUpgrade libitmUpgrade liblsanUpgrade libgomp-offload-nvptxUpgrade gcc-gfortranUpgrade libgomp-offload-nvptx-debuginfoUpgrade libasanUpgrade gcc-debugsourceUpgrade libgcc-debuginfoUpgrade gcc-debuginfoUpgrade gcc-c++-debuginfoUpgrade gcc-gdb-pluginUpgrade gcc-gfortran-debuginfoUpgrade liblsan-debuginfoUpgrade libgompUpgrade libstdc++-develUpgrade gcc-offload-nvptxUpgrade libtsan-debuginfoUpgrade libitm-develUpgrade gcc-c++Upgrade libatomic-debuginfoUpgrade libquadmath-debuginfoUpgrade libgccUpgrade libgfortran-debuginfoUpgrade gcc-plugin-develUpgrade libubsanUpgrade libitm-debuginfoUpgrade libquadmath-develUpgrade libstdc++-docsUpgrade libtsanUpgrade libstdc++Upgrade libatomic-staticUpgrade gcc-gdb-plugin-debuginfoUpgrade gcc-plugin-devel-debuginfoUpgrade gcc-offload-nvptx-debuginfoUpgrade libubsan-debuginfoUpgrade cpp-debuginfoUpgrade libquadmathUpgrade libgomp-debuginfoUpgrade libasan-debuginfoUpgrade libstdc++-debuginfo | Apr 29, 2020 | Sep 2, 2019 |
| Suse | — | Upgrade libubsan1Upgrade libobjc4Upgrade cross-nvptx-newlib7-develUpgrade libada9Upgrade libitm1-32bitUpgrade gcc9-c++Upgrade libada9-32bitUpgrade libstdc++6-32bitUpgrade gcc9-32bitUpgrade libgfortran5-32bitUpgrade libstdc++6-pp-gcc9-32bitUpgrade libgomp1Upgrade gcc9-ada-32bitUpgrade libgfortran4Upgrade libgo14Upgrade libasan4-32bitUpgrade libcilkrts5-32bitUpgrade liblsan0Upgrade gcc9-localeUpgrade cpp9Upgrade libada7-32bitUpgrade libgo11-32bitUpgrade gcc9Upgrade gcc7-c++-32bitUpgrade libada7Upgrade libgomp1-32bitUpgrade libubsan0-32bitUpgrade gcc9-adaUpgrade libgo11Upgrade gcc7-objc-32bitUpgrade cross-nvptx-gcc7Upgrade gcc7-obj-c++Upgrade libstdc++6-devel-gcc9-32bitUpgrade libtsan0Upgrade libasan5-32bitUpgrade libgfortran5Upgrade libstdc++6Upgrade libstdc++6-devel-gcc7-32bitUpgrade libquadmath0Upgrade libitm1Upgrade gcc9-goUpgrade gcc7-obj-c++-32bitUpgrade libstdc++6-devel-gcc7Upgrade libasan5Upgrade libgo14-32bitUpgrade gcc9-fortran-32bitUpgrade gcc7-adaUpgrade libstdc++6-devel-gcc9Upgrade libatomic1Upgrade gcc7-goUpgrade libgcc_s1-32bitUpgrade gcc7-objcUpgrade gcc7-fortran-32bitUpgrade libobjc4-32bitUpgrade libgfortran4-32bitUpgrade gcc7-infoUpgrade libgcc_s1Upgrade gcc7-32bitUpgrade gcc7-localeUpgrade gcc9-go-32bitUpgrade libubsan1-32bitUpgrade libstdc++6-pp-gcc9Upgrade cross-nvptx-newlib9-develUpgrade libubsan0Upgrade gcc7-ada-32bitUpgrade gcc7-c++Upgrade cpp7Upgrade cross-nvptx-gcc9Upgrade libcilkrts5Upgrade libquadmath0-32bitUpgrade gcc9-fortranUpgrade libatomic1-32bitUpgrade gcc7Upgrade gcc9-c++-32bitUpgrade gcc7-fortranUpgrade libasan4Upgrade gcc7-go-32bitUpgrade libstdc++6-localeUpgrade gcc9-info | Oct 24, 2019 | Sep 2, 2019 |
| Ubuntu | — | Upgrade gcc-10Upgrade gcc-7Upgrade gcc-8 | Nov 19, 2024 | Sep 2, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub